keri-ts 2.1.0 → 2.2.0

package/types/acdc/custody.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Registry blind derivation over the Keeper's registry root.
+ *
+ * Issuing a blinded (BUP) registry update needs a deterministic opening. The
+ * root salt stays in the Keeper; this core derives openings from it and keeps
+ * only the public, event-specific coordinates in a `DerivedUpdateStore`. A
+ * runtime defaults to {@link BaserDerivedUpdateStore}; a wallet backs the port
+ * with its own table. The core opens no database of its own.
+ */
+import { type SerderACDC } from "cesr-ts";
+import type { Hab, Habery } from "../app/identity/habbing.js";
+import type { RegBaser } from "./regbasing.js";
+import { type RegistryDisclosure } from "./regeventing.js";
+import type { RegistryStore } from "./registering.js";
+/** Public event-specific inputs; neither a salt nor a derived opening is retained here. */
+export interface DerivedUpdate {
+    credential: string;
+    state: string;
+    bound: {
+        bn: string;
+        bd: string;
+    } | null;
+}
+/** Durable, non-secret derivation coordinates keyed by BUP SAID; `pin` overwrites. */
+export interface DerivedUpdateStore {
+    get(event: string): DerivedUpdate | null;
+    pin(event: string, value: DerivedUpdate): void;
+}
+/** Process-local store for a CLI or tests; a wallet backs the port with its own durable table. */
+export declare class MemoryDerivedUpdateStore implements DerivedUpdateStore {
+    private readonly rows;
+    get(event: string): DerivedUpdate | null;
+    pin(event: string, value: DerivedUpdate): void;
+}
+/**
+ * Derivation coordinates kept in a registry environment's own database (`RegBaser.dvus`). The default of a
+ * runtime that supplies no store, so a server agent keeps them durably beside the registry events they
+ * describe. A wallet with its own table still passes that instead.
+ */
+export declare class BaserDerivedUpdateStore implements DerivedUpdateStore {
+    private readonly baser;
+    constructor(baser: RegBaser);
+    get(event: string): DerivedUpdate | null;
+    pin(event: string, value: DerivedUpdate): void;
+}
+/** Owners a custody borrows; construction opens nothing. */
+export interface RegistryCustodyOptions {
+    hby: Habery;
+    hab: Hab;
+    registry: RegistryStore;
+    store: DerivedUpdateStore;
+}
+/** Explicit capability over a local habitat's Keeper root and accepted public registry evidence. */
+export declare class RegistryCustody {
+    readonly options: RegistryCustodyOptions;
+    /** Borrow owners only; construction loads no encrypted row. */
+    constructor(options: RegistryCustodyOptions);
+    /** Bind the actual local habitat and its key owners, never an AID label alone. */
+    private owner;
+    /** Load only this habitat's Keeper root; possession confers no protocol authority. */
+    private load;
+    /** Provision an issuer-selected root once, refusing replacement behind opaque accepted history. */
+    createCustody(registry: string): {
+        registry: string;
+    };
+    /** Derive a candidate only; consumers still authenticate its exact accepted event and bound KEL reference. */
+    derive(registry: string, ordinal: number | bigint, credential: string, state: string, options?: {
+        bound?: boolean;
+        bsn?: number | bigint;
+        bd?: string;
+    }): RegistryDisclosure;
+    /** Persist exact nonsecret coordinates before processing/anchoring a newly derived BUP. */
+    retainDerivedUpdate(event: SerderACDC, opening: RegistryDisclosure): DerivedUpdate;
+    /** Reproduce only the exact accepted event, never today's head or a later credential's coordinates. */
+    derivedOpening(event: SerderACDC): RegistryDisclosure;
+}
+//# sourceMappingURL=custody.d.ts.map

package/types/acdc/custody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.d.ts","sourceRoot":"","sources":["../../src/acdc/custody.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAA8D,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAG9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,KAAK,kBAAkB,EAAY,MAAM,kBAAkB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,2FAA2F;AAC3F,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC1C;AAED,sFAAsF;AACtF,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IACzC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAChD;AAED,kGAAkG;AAClG,qBAAa,wBAAyB,YAAW,kBAAkB;IACjE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoC;IACzD,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAGxC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;CAG/C;AAED;;;;GAIG;AACH,qBAAa,uBAAwB,YAAW,kBAAkB;IACpD,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,QAAQ;IAC5C,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAIxC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;CAG/C;AAED,4DAA4D;AAC5D,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,GAAG,CAAC;IACT,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED,oGAAoG;AACpG,qBAAa,eAAe;IAEd,QAAQ,CAAC,OAAO,EAAE,sBAAsB;IADpD,+DAA+D;gBAC1C,OAAO,EAAE,sBAAsB;IAIpD,kFAAkF;IAClF,OAAO,CAAC,KAAK;IAOb,sFAAsF;IACtF,OAAO,CAAC,IAAI;IAOZ,mGAAmG;IACnG,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE;IAiCrD,8GAA8G;IAC9G,MAAM,CACJ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAO,GACpE,kBAAkB;IAarB,2FAA2F;IAC3F,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,GAAG,aAAa;IAiBlF,uGAAuG;IACvG,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,kBAAkB;CAwBtD"}

package/types/acdc/dhking.d.ts

@@ -5,13 +5,14 @@
  */
 import { type Cigar, type Diger, Salter, type SerderKERI } from "cesr-ts";
 import type { Operation } from "effection";
-import type { ExchangeDecision, Exchanger } from "../app/exchanges/exchanging.js";
+import type { ExchangeDecision, ExchangeInput, Exchanger } from "../app/exchanges/exchanging.js";
 import { Hab } from "../app/identity/habbing.js";
 import { type GroupCoordinator } from "../app/multisig/group-members.js";
 import { type AuxiliaryQueryProcessor, type MessageDropDecision } from "../app/protocol/parsering.js";
 import { Deck } from "../core/deck.js";
 import type { KeriDispatchEnvelope, TransIdxSigGroup } from "../core/dispatch.js";
 import { type ReplyProcessDecision, type Revery } from "../core/routing.js";
+import type { Baser } from "../db/basing.js";
 import { type RegistryStore } from "./registering.js";
 /** Exact context bound by the Python HKDF profile. XID can differ from Grant SAID. */
 export interface DhkeContext {
@@ -33,6 +34,40 @@ export declare function generateKeyPair(): {
 };
 /** Derive one Salt128; malformed context, wrong local keys and low-order peers refuse. */
 export declare function deriveRoot(privateKey: Uint8Array, context: DhkeContext): Salter;
+/** The Grant `hab` takes part in, with its parties, transaction and registry scope. */
+interface GrantScope {
+    input: ExchangeInput;
+    issuer: string;
+    issuee: string;
+    xid: string;
+    registries: readonly string[];
+}
+/**
+ * The DH transaction id of a Grant: its own SAID when it opens the exchange (`xip`), and otherwise the exchange it
+ * continues (`x`). The one definition, so the owner and any workflow that names the transaction agree.
+ */
+export declare function grantTransactionId(grant: SerderKERI): string;
+/**
+ * The scope of a completed exchange that can finish without new key exchange: the Grant is still pending
+ * inside its original deadline and `hab` holds a root for the registries it discloses. The scope is those
+ * registries; a registry that is still fresh must hold one. No fresh registry is required, because the
+ * issuer's update may already be accepted: {@link Dhke.finish} proves the held root against that update, so
+ * a root from any other exchange is rejected there. Pure read of stores. Null when nothing can resume.
+ */
+export declare function resumableExchange({ hab, exc }: {
+    hab: Hab;
+    exc: Exchanger;
+}, grant: string): GrantScope | null;
+/**
+ * Whether `registry` has no committed state: its head is still the inception and no update is escrowed.
+ * A staged update waits in the missing-anchor or out-of-order escrow under its registry until the issuer's
+ * anchor is accepted, and an accepted one moves the head, so two keyed reads bounded by this registry
+ * decide it. Only then can a retained root be unused, because every derivation from a root, and every copy
+ * of it to another member (which `RegistryRoot` authorizes only for an accepted, issuer-anchored update),
+ * starts from a staged or accepted update. A remote update escrowed for this registry also counts, which
+ * is the conservative side.
+ */
+export declare function registryUncommitted(registryStore: RegistryStore, registry: string): boolean;
 /** Group consent names its own accepted coordinator and elected member; individuals omit both. */
 export interface DhkeApproval {
     coordinator?: GroupCoordinator;
@@ -44,6 +79,16 @@ export interface DhkeOutgoing {
     dest: string;
     msg: Uint8Array;
 }
+/**
+ * The group custodian just retained these registries' roots for `gid`; every other
+ * current member should receive a sealed copy (KERIpy's `replicate` cue). It carries
+ * coordinates only, never a root. It is a separate deck from `outgoing` because it is
+ * not wire: a drainer that sends every `outgoing` item would send it.
+ */
+export interface DhkeReplicate {
+    gid: string;
+    registries: string[];
+}
 /**
  * Issuer/issuee DH for an explicitly approved pending Grant. Wire
  * intake cannot approve work. Inject as ProtocolProcessor.qvy and register on
@@ -56,6 +101,8 @@ export declare class Dhke implements AuxiliaryQueryProcessor {
     static readonly Route = "/ipex/dhke";
     readonly resource = "/ipex/dhke";
     readonly outgoing: Deck<DhkeOutgoing>;
+    /** Completion cues for roots just retained by this group's custodian; feed `RootReplicator.replicate`. */
+    readonly replicated: Deck<DhkeReplicate>;
     private readonly pendingQueries;
     private readonly now;
     private readonly operations;
@@ -64,16 +111,46 @@ export declare class Dhke implements AuxiliaryQueryProcessor {
     readonly rvy: Revery;
     readonly registryStore: RegistryStore;
     readonly group: boolean;
+    private readonly kram;
     /** Bind concrete local owners; construction grants no consent and writes nothing. */
-    constructor({ hab, exc, registryStore, rvy, now }: {
+    constructor({ hab, exc, registryStore, rvy, now, kram }: {
         hab: Hab;
         exc: Exchanger;
         registryStore: RegistryStore;
         rvy?: Revery;
         now?: () => number;
+        /** False when the runtime has KRAM off: its `tmsc`/`msgc` rows never exist, so `approve` refuses. */
+        kram?: boolean;
     });
-    /** Select one live fresh issuance and freeze its exact bodies, parties and registry order. */
+    /**
+     * Select one live fresh issuance and freeze its exact bodies, parties and registry order.
+     *
+     * A registry that already holds a root refuses (`Registry root conflicts with this live DH operation`)
+     * unless it has no committed state ({@link registryUncommitted}): then the held root was never used and
+     * this exchange, whose Grant is from the registry's issuer, overwrites it when it retains its own root,
+     * never at approval, so an interruption before retention leaves the old root. Once any update is staged
+     * or accepted the refusal is unchanged. A KERIpy peer keeps the old rule and refuses such a second
+     * exchange: with a KERIpy holder the issuer needs a fresh registry. One process also refuses a second
+     * live operation on a registry, so two pending Grants cannot clobber each other's root.
+     */
     approve(grant: string, { coordinator, custodian }?: DhkeApproval): string;
+    /**
+     * Resume a completed exchange after a process restart, without new key exchange: rebuild the operation as
+     * completed from the roots held for the Grant's registries ({@link resumableExchange}). It holds no
+     * ephemeral key, so it cannot start, answer or renew a query; it can only {@link complete} and
+     * {@link finish}, which signs nothing and verifies the issuer's update against the held root. Needs an
+     * unlocked Keeper; wire intake never calls it. Repeating it returns the same transaction.
+     *
+     * @throws ValidationError unless the Grant is pending and holds a root for each registry in its scope.
+     */
+    resume(grant: string, { coordinator, custodian }?: DhkeApproval): string;
+    /** Freeze the exact pending Grant, parties and registry order into an operation; registers nothing. */
+    private frozen;
+    /**
+     * Whether this owner already holds a live operation for `grant`. Two operation tables over one runtime
+     * (the host's and a command's own) use it so only the first to reach a Grant drives it.
+     */
+    holds(grant: string): boolean;
     /** Return the stable issuer proposal until own threshold intake supplies the complete query. */
     start(grant: string): Uint8Array;
     /**
@@ -109,6 +186,16 @@ export declare class Dhke implements AuxiliaryQueryProcessor {
     finish(xid: string): Operation<ExchangeDecision>;
     /** Drop local ephemeral key references and permanently refuse this operation. */
     abandon(xid: string): void;
+    /**
+     * Whether this local habitat is the party of DH transaction `xid` with `sender`.
+     *
+     * Messages carry no recipient, so a per-identifier registry selects the owner by transaction:
+     * an approved operation here, a stored Grant from `sender` addressed to this habitat, or, for a
+     * group, its own members' contributions, which KRAM must pool before this owner consents.
+     */
+    inTransaction(sender: string, xid: string): boolean;
+    /** Recipients of the pending Grants `sender` opened in DH transaction `xid`, from KRAM-accepted store rows. */
+    static recipients(db: Baser, sender: string, xid: string): string[];
     /** Release all process-local approvals and retry bytes; zero owned ephemeral scalar arrays. */
     close(): void;
     /** Retain public query evidence against one exact pending Grant, without creating keys or consent. */
@@ -117,6 +204,9 @@ export declare class Dhke implements AuxiliaryQueryProcessor {
     private pruneQueries;
     /** Consume the first authenticated request only after explicit approval; never renew either clock. */
     private replayQuery;
+    /** The persisted query for `xid` after a restart, with its lifetime recomputed from KRAM's durable records. */
+    private loadHeld;
+    private dropHeld;
     /** Bound process-local public evidence by the original query and accepted Grant lifetimes. */
     private retainUntil;
     private operation;
@@ -133,4 +223,5 @@ export declare class Dhke implements AuxiliaryQueryProcessor {
     /** Recheck exact frozen election evidence and current membership without choosing a replacement. */
     private custody;
 }
+export {};
 //# sourceMappingURL=dhking.d.ts.map

package/types/acdc/dhking.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dhking.d.ts","sourceRoot":"","sources":["../../src/acdc/dhking.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGL,KAAK,KAAK,EAGV,KAAK,KAAK,EAUV,MAAM,EAEN,KAAK,UAAU,EAKhB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,KAAK,EAAE,gBAAgB,EAAiB,SAAS,EAAE,MAAM,gCAAgC,CAAC;AACjG,OAAO,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AACjD,OAAO,EACL,KAAK,gBAAgB,EAKtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,uBAAuB,EAG5B,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAMlF,OAAO,EAAmB,KAAK,oBAAoB,EAAE,KAAK,MAAM,EAA2B,MAAM,oBAAoB,CAAC;AAGtH,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAI/E,sFAAsF;AACtF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB;AAiBD,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAI1D;AAED,2EAA2E;AAC3E,wBAAgB,eAAe,IAAI;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAG/E;AAED,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,GAAG,MAAM,CA6B/E;AA4BD,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,8FAA8F;AAC9F,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,qBAAa,IAAK,YAAW,uBAAuB;IAClD,MAAM,CAAC,QAAQ,CAAC,KAAK,gBAAgB;IACrC,QAAQ,CAAC,QAAQ,gBAAc;IAC/B,QAAQ,CAAC,QAAQ,qBAA4B;IAC7C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG3B;IACJ,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAExB,qFAAqF;gBACzE,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,GAAa,EAAE,GAAc,EAAE,EAAE;QACtE,GAAG,EAAE,GAAG,CAAC;QACT,GAAG,EAAE,SAAS,CAAC;QACf,aAAa,EAAE,aAAa,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;KACpB;IAgBD,8FAA8F;IAC9F,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,GAAE,YAAiB,GAAG,MAAM;IAqE7E,gGAAgG;IAChG,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU;IAsBhC;;;;;;;;;OASG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAiBhC,+FAA+F;IAC/F,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU;IA+CzD,wFAAwF;IACxF,YAAY,CAAC,QAAQ,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAAG,mBAAmB;IAoEtF,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAW,EAAE,IAAS,EAAE,EAAE;QAC7D,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;IA4BxB,uFAAuF;IACvF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAO9B,yGAAyG;IACzG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAOlC,gGAAgG;IAC/F,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAwCjD,iFAAiF;IACjF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAQ1B,+FAA+F;IAC/F,KAAK,IAAI,IAAI;IAOb,sGAAsG;IACtG,OAAO,CAAC,WAAW;IAyBnB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAMpB,sGAAsG;IACtG,OAAO,CAAC,WAAW;IASnB,8FAA8F;IAC9F,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,OAAO;IAgBf,OAAO,CAAC,IAAI;IAWZ,OAAO,CAAC,KAAK;IAQb,kGAAkG;IAClG,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,MAAM;IAkBd,OAAO,CAAC,MAAM;IAOd,OAAO,CAAC,YAAY;IAKpB,oGAAoG;IACpG,OAAO,CAAC,OAAO;CAqBhB"}
+{"version":3,"file":"dhking.d.ts","sourceRoot":"","sources":["../../src/acdc/dhking.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGL,KAAK,KAAK,EAGV,KAAK,KAAK,EAUV,MAAM,EAEN,KAAK,UAAU,EAKhB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAG3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AACjG,OAAO,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AACjD,OAAO,EACL,KAAK,gBAAgB,EAKtB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,uBAAuB,EAI5B,KAAK,mBAAmB,EAEzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAMlF,OAAO,EAAmB,KAAK,oBAAoB,EAAE,KAAK,MAAM,EAA2B,MAAM,oBAAoB,CAAC;AACtH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAG7C,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAI/E,sFAAsF;AACtF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;CACzB;AAiBD,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAI1D;AAED,2EAA2E;AAC3E,wBAAgB,eAAe,IAAI;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAG/E;AAED,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,GAAG,MAAM,CA6B/E;AAED,uFAAuF;AACvF,UAAU,UAAU;IAClB,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAE5D;AA0BD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAAE,GAAG,EAAE,GAAG,CAAC;IAAC,GAAG,EAAE,SAAS,CAAA;CAAE,EAAE,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAW9G;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM3F;AA8BD,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,8FAA8F;AAC9F,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,qBAAa,IAAK,YAAW,uBAAuB;IAClD,MAAM,CAAC,QAAQ,CAAC,KAAK,gBAAgB;IACrC,QAAQ,CAAC,QAAQ,gBAAc;IAC/B,QAAQ,CAAC,QAAQ,qBAA4B;IAC7C,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,sBAA6B;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG3B;IACJ,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoC;IAC/D,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAU;IAE/B,qFAAqF;gBACzE,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAE,GAAa,EAAE,GAAc,EAAE,IAAW,EAAE,EAAE;QACnF,GAAG,EAAE,GAAG,CAAC;QACT,GAAG,EAAE,SAAS,CAAC;QACf,aAAa,EAAE,aAAa,CAAC;QAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;QACnB,qGAAqG;QACrG,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB;IAiBD;;;;;;;;;;OAUG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,GAAE,YAAiB,GAAG,MAAM;IAoC7E;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,GAAE,YAAiB,GAAG,MAAM;IAmB5E,uGAAuG;IACvG,OAAO,CAAC,MAAM;IAgDd;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAK7B,gGAAgG;IAChG,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU;IAsBhC;;;;;;;;;OASG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAiBhC,+FAA+F;IAC/F,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU;IA+CzD,wFAAwF;IACxF,YAAY,CAAC,QAAQ,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAAG,mBAAmB;IAoEtF,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAW,EAAE,IAAS,EAAE,EAAE;QAC7D,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;KAC3B,GAAG,oBAAoB;IA4BxB,uFAAuF;IACvF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAO9B,yGAAyG;IACzG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAOlC,gGAAgG;IAC/F,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAwCjD,iFAAiF;IACjF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAS1B;;;;;;OAMG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAKnD,+GAA+G;IAC/G,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IASnE,+FAA+F;IAC/F,KAAK,IAAI,IAAI;IAQb,sGAAsG;IACtG,OAAO,CAAC,WAAW;IAmCnB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAMpB,sGAAsG;IACtG,OAAO,CAAC,WAAW;IAUnB,+GAA+G;IAC/G,OAAO,CAAC,QAAQ;IAahB,OAAO,CAAC,QAAQ;IAIhB,8FAA8F;IAC9F,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,OAAO;IAgBf,OAAO,CAAC,IAAI;IAWZ,OAAO,CAAC,KAAK;IAcb,kGAAkG;IAClG,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,QAAQ;IAYhB,OAAO,CAAC,MAAM;IAkBd,OAAO,CAAC,MAAM;IAgBd,OAAO,CAAC,YAAY;IAKpB,oGAAoG;IACpG,OAAO,CAAC,OAAO;CAqBhB"}

package/types/acdc/regbasing.d.ts

@@ -1,9 +1,11 @@
 /** Public ACDC registry database layout and joined LMDB lifecycle. */
 import { Diger, NumberPrimitive, Saider, SerderACDC } from "cesr-ts";
 import type { Operation } from "effection";
+import { DerivedUpdateRecord } from "../core/records.js";
 import type { StoreIdentity } from "../db/core/dber.js";
 import type { LMDBerOptions } from "../db/core/lmdber.js";
 import { type StoreFamily, StoreOwner } from "../db/core/store-owner.js";
+import { Komer } from "../db/koming.js";
 import { B64OnIoSetSuber, BytesSuber, CatCesrSuber, CesrOnSuber, CesrSuber, SerderSuber } from "../db/subing.js";
 /** Registry paths retain the existing .tufa default and explicit .keri compatibility mode. */
 export interface RegBaserOptions extends LMDBerOptions {
@@ -26,6 +28,8 @@ export declare class RegBaser extends StoreOwner {
     heads: CesrSuber<Saider>;
     /** Event-SAID -> one deliberately published counted BSQ/BSS opening; never private custody. */
     openings: BytesSuber;
+    /** keri-ts only. BUP SAID -> public blind-derivation coordinates; never a salt or opening. */
+    dvus: Komer<DerivedUpdateRecord>;
     /** Event-SAID -> earliest verified KEL source couple, in the current store. */
     ancs: CatCesrSuber<[NumberPrimitive, Diger]>;
     /** Insertion-ordered missing-anchor event-SAID tuples by registry and ordinal. */

package/types/acdc/regbasing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"regbasing.d.ts","sourceRoot":"","sources":["../../src/acdc/regbasing.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,EAAK,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,KAAK,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEjH,8FAA8F;AAC9F,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;GAKG;AACH,qBAAa,QAAS,SAAQ,UAAU;IACtC,oCAAoC;IACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAwB;IAE3D,gFAAgF;IAChF,IAAI,EAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/B,qFAAqF;IACrF,IAAI,EAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,4FAA4F;IAC5F,KAAK,EAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,+FAA+F;IAC/F,QAAQ,EAAG,UAAU,CAAC;IAEtB,+EAA+E;IAC/E,IAAI,EAAG,YAAY,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9C,kFAAkF;IAClF,IAAI,EAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACjC,gFAAgF;IAChF,IAAI,EAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjC,4EAA4E;IAC3E,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,SAAS,CAAC,OAAO,CAAC;CAiBzD"}
+{"version":3,"file":"regbasing.d.ts","sourceRoot":"","sources":["../../src/acdc/regbasing.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,EAAK,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,KAAK,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEjH,8FAA8F;AAC9F,MAAM,WAAW,eAAgB,SAAQ,aAAa;IACpD,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;GAKG;AACH,qBAAa,QAAS,SAAQ,UAAU;IACtC,oCAAoC;IACpC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAwB;IAE3D,gFAAgF;IAChF,IAAI,EAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/B,qFAAqF;IACrF,IAAI,EAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,4FAA4F;IAC5F,KAAK,EAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1B,+FAA+F;IAC/F,QAAQ,EAAG,UAAU,CAAC;IAEtB,8FAA8F;IAC9F,IAAI,EAAG,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAElC,+EAA+E;IAC/E,IAAI,EAAG,YAAY,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9C,kFAAkF;IAClF,IAAI,EAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACjC,gFAAgF;IAChF,IAAI,EAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjC,4EAA4E;IAC3E,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,SAAS,CAAC,OAAO,CAAC;CAkBzD"}

package/types/acdc/salting.d.ts

@@ -24,6 +24,7 @@ import { Salter, type SerderACDC, type SerderKERI, Texter } from "cesr-ts";
 import type { ExchangeRouteHandler } from "../app/exchanges/exchanging.js";
 import type { Hab, Habery } from "../app/identity/habbing.js";
 import type { Notifier } from "../app/notifications/notifying.js";
+import type { ChangeSink } from "../app/runtime/workflow-contract.js";
 import { ValidationError } from "../core/errors.js";
 import { type RegistryDisclosure } from "./regeventing.js";
 import type { Regery } from "./registraring.js";
@@ -120,7 +121,9 @@ export declare class RegistryRoot implements ExchangeRouteHandler {
     readonly hby: Habery;
     readonly rgy: Regery;
     readonly notifier: Notifier | null;
-    constructor(hby: Habery, rgy: Regery, notifier?: Notifier | null);
+    /** Told `{kind: "root", id: registry}` after a copy is retained, so an embedder that waited for the root can act. */
+    readonly changes: ChangeSink | undefined;
+    constructor(hby: Habery, rgy: Regery, notifier?: Notifier | null, changes?: ChangeSink);
     /** True when `member` contributed to any accepted establishment of `group`. */
     private historical;
     /** True when `member`'s latest contributing key is in `group`'s current keys. */
@@ -164,6 +167,8 @@ export declare class RegistryRoot implements ExchangeRouteHandler {
     resealed(ghab: Hab, rotation: string): string[];
     /** Return the current signing member AIDs of `gid` known to this Habery. */
     members(gid: string): string[];
+    /** Public key by which `member` currently contributes to `gid`, or null while not a known current signing member. */
+    contributor(gid: string, member: string): string | null;
     /** Return the registry SAIDs with a root retained locally for `gid`. */
     held(gid: string): string[];
     /** True when `ghab`'s local member is the elected sender for `rotation`. */

package/types/acdc/salting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"salting.d.ts","sourceRoot":"","sources":["../../src/acdc/salting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAgBL,MAAM,EACN,KAAK,UAAU,EACf,KAAK,UAAU,EACf,MAAM,EAKP,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAOpD,OAAO,EAAE,KAAK,kBAAkB,EAA+D,MAAM,kBAAkB,CAAC;AACxH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,0EAA0E;AAC1E,qBAAa,WAAY,SAAQ,eAAe;CAAG;AAEnD,6EAA6E;AAC7E,qBAAa,cAAe,SAAQ,eAAe;CAAG;AAEtD,4FAA4F;AAC5F,qBAAa,YAAa,SAAQ,cAAc;CAAG;AAEnD,iGAAiG;AACjG,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AA8DD;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,CACrB,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,UAAU,CA4BZ;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,qBAAa,YAAa,YAAW,oBAAoB;IACvD,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAAoB;IACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,wBAAwB;IAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,iCAAkC;IACxD,QAAQ,CAAC,QAAQ,oBAAsB;IACvC,QAAQ,CAAC,aAAa,KAAK;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;gBAEvB,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,QAAQ,GAAG,IAAW;IAUtE,+EAA+E;IAC/E,OAAO,CAAC,UAAU;IAWlB,iFAAiF;IACjF,OAAO,CAAC,OAAO;IAKf,6GAA6G;IAC7G,OAAO,CAAC,WAAW;IAKnB,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU;IAoBtC,6EAA6E;IAC7E,OAAO,CAAC,MAAM,CAAC,UAAU;IAMzB;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU;IAsBvF,sGAAsG;IACtG,OAAO,CAAC,QAAQ;IAiBhB;;;;;;;;OAQG;IACH,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAe,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,MAAM,EAAE;IAcjG;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE;IAe/C,4EAA4E;IAC5E,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAW9B,wEAAwE;IACxE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAQ3B,4EAA4E;IAC5E,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAW/C;;;;;;;;;;;OAWG;IACH,OAAO,CACL,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACpF,UAAU;IA6Bb;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI;IAUjF;;;;;;;;OAQG;IACH,OAAO,CAAE,KAAK;IAgBd,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAE,MAAM;IAStB,kGAAkG;IAClG,OAAO,CAAC,KAAK;IAyBb;;;;OAIG;IACH,OAAO,CAAC,KAAK;IAiCb,mFAAmF;IACnF,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO;IAWjE;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO;IAaxE,2FAA2F;IAC3F,OAAO,CAAC,OAAO;IAOf,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IAMrE,OAAO,CAAC,MAAM;IAMd,8EAA8E;IAC9E,OAAO,CAAC,IAAI;IAqCZ;;;;;;OAMG;IACH,OAAO,CAAC,MAAM;IA6Cd,+EAA+E;IAC/E,OAAO,CAAC,OAAO;IAcf;;;;OAIG;IACH,cAAc,IAAI,IAAI;IAItB;;;;;;;;;;;OAWG;IACH,SAAS,IAAI,MAAM,EAAE;IAgBrB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,OAAO;IAUzG,OAAO,CAAC,UAAU;IAWlB,6EAA6E;IAC7E,OAAO,IAAI,eAAe,EAAE;CAkB7B"}
+{"version":3,"file":"salting.d.ts","sourceRoot":"","sources":["../../src/acdc/salting.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAgBL,MAAM,EACN,KAAK,UAAU,EACf,KAAK,UAAU,EACf,MAAM,EAKP,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAOpD,OAAO,EAAE,KAAK,kBAAkB,EAA+D,MAAM,kBAAkB,CAAC;AACxH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEhD,0EAA0E;AAC1E,qBAAa,WAAY,SAAQ,eAAe;CAAG;AAEnD,6EAA6E;AAC7E,qBAAa,cAAe,SAAQ,eAAe;CAAG;AAEtD,4FAA4F;AAC5F,qBAAa,YAAa,SAAQ,cAAc;CAAG;AAEnD,iGAAiG;AACjG,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AA8DD;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,CACrB,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C,UAAU,CA4BZ;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,qBAAa,YAAa,YAAW,oBAAoB;IACvD,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAAoB;IACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,wBAAwB;IAC5C,MAAM,CAAC,QAAQ,CAAC,MAAM,iCAAkC;IACxD,QAAQ,CAAC,QAAQ,oBAAsB;IACvC,QAAQ,CAAC,aAAa,KAAK;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAC;IACnC,qHAAqH;IACrH,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,CAAC;gBAE7B,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,GAAE,QAAQ,GAAG,IAAW,EAAE,OAAO,CAAC,EAAE,UAAU;IAW5F,+EAA+E;IAC/E,OAAO,CAAC,UAAU;IAWlB,iFAAiF;IACjF,OAAO,CAAC,OAAO;IAKf,6GAA6G;IAC7G,OAAO,CAAC,WAAW;IAKnB,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU;IAoBtC,6EAA6E;IAC7E,OAAO,CAAC,MAAM,CAAC,UAAU;IAMzB;;;;;OAKG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU;IAsBvF,sGAAsG;IACtG,OAAO,CAAC,QAAQ;IAiBhB;;;;;;;;OAQG;IACH,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAe,EAAE,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,MAAM,EAAE;IAcjG;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE;IAe/C,4EAA4E;IAC5E,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAW9B,qHAAqH;IACrH,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAKvD,wEAAwE;IACxE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAQ3B,4EAA4E;IAC5E,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAW/C;;;;;;;;;;;OAWG;IACH,OAAO,CACL,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,EAAE,KAAK,EAAE,EAAE,EAAE,MAAc,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GACpF,UAAU;IA6Bb;;;;;;;OAOG;IACH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI;IAUjF;;;;;;;;OAQG;IACH,OAAO,CAAE,KAAK;IAgBd,mEAAmE;IACnE,OAAO,CAAC,MAAM,CAAE,MAAM;IAStB,kGAAkG;IAClG,OAAO,CAAC,KAAK;IAyBb;;;;OAIG;IACH,OAAO,CAAC,KAAK;IAiCb,mFAAmF;IACnF,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO;IAWjE;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO;IAaxE,2FAA2F;IAC3F,OAAO,CAAC,OAAO;IAOf,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI;IAMrE,OAAO,CAAC,MAAM;IAMd,8EAA8E;IAC9E,OAAO,CAAC,IAAI;IAqCZ;;;;;;OAMG;IACH,OAAO,CAAC,MAAM;IA8Cd,+EAA+E;IAC/E,OAAO,CAAC,OAAO;IAcf;;;;OAIG;IACH,cAAc,IAAI,IAAI;IAItB;;;;;;;;;;;OAWG;IACH,SAAS,IAAI,MAAM,EAAE;IAgBrB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,kBAAkB,CAAA;KAAO,GAAG,OAAO;IAUzG,OAAO,CAAC,UAAU;IAWlB,6EAA6E;IAC7E,OAAO,IAAI,eAAe,EAAE;CAkB7B"}

package/types/acdc/scheming.d.ts

@@ -22,6 +22,8 @@ export declare class MissingSchemaError extends ValidationError {
 export declare class FailedSchemaValidationError extends ValidationError {
 }
 type Schema = Record<string, unknown>;
+/** How many schema closures this process has compiled; a diagnostic for tests of the cache. */
+export declare function schemaCompilationCount(): number;
 /** Local static schema closure plus a synchronous Draft 2020-12 validator; legacy Schemer behavior is unchanged. */
 export declare function validateSchema(acdc: SerderACDC, db: Baser, override?: string | Readonly<Schema>): SchemaValidation;
 export {};

package/types/acdc/scheming.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scheming.d.ts","sourceRoot":"","sources":["../../src/acdc/scheming.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE7C,6FAA6F;AAC7F,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IACrF,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,QAAQ,GAAG,YAAY,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,4FAA4F;AAC5F,qBAAa,kBAAmB,SAAQ,eAAe;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAGpC;AACD,uFAAuF;AACvF,qBAAa,2BAA4B,SAAQ,eAAe;CAAG;AAGnE,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAgNtC,oHAAoH;AACpH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,gBAAgB,CA8DlH"}
+{"version":3,"file":"scheming.d.ts","sourceRoot":"","sources":["../../src/acdc/scheming.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE7C,6FAA6F;AAC7F,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IACrF,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,QAAQ,GAAG,YAAY,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,4FAA4F;AAC5F,qBAAa,kBAAmB,SAAQ,eAAe;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CAGpC;AACD,uFAAuF;AACvF,qBAAa,2BAA4B,SAAQ,eAAe;CAAG;AAGnE,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAiOtC,+FAA+F;AAC/F,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAwDD,oHAAoH;AACpH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,gBAAgB,CA+BlH"}

package/types/acdc/unblinding.d.ts

@@ -1,7 +1,14 @@
 /**
- * Explicitly approved IPEX Unblind, following Python's local query/reply profile.
+ * IPEX Unblind, following Python's local query/reply profile.
  * Only event openings cross this boundary. Roots, application state vocabulary,
  * transport and final Admit remain with their existing owners.
+ *
+ * Consent: the disclosee explicitly approves (`approve`/`start`) the Grant it requests proofs for.
+ * The discloser has no separate approval step: it consented by signing the presentation Grant, so an
+ * authenticated query for a live Grant this identifier sent is answered automatically, bounded by that
+ * Grant's registry scope and original deadline. The rule is decided from stored state, so it survives a
+ * restart. KERIpy's `Unblind` keeps its own local approve gate; that is local policy and the wire is
+ * unchanged.
  */
 import { type Cigar, Diger, type SerderKERI } from "cesr-ts";
 import type { Operation } from "effection";
@@ -11,8 +18,11 @@ import { type AuxiliaryQueryProcessor, type MessageDropDecision } from "../app/p
 import { Deck } from "../core/deck.js";
 import { type KeriDispatchEnvelope, TransIdxSigGroup } from "../core/dispatch.js";
 import { type ReplyProcessDecision, type Revery } from "../core/routing.js";
+import type { Baser } from "../db/basing.js";
 import type { RegistryObserver } from "./observing.js";
 import { type RegistryDisclosure } from "./regeventing.js";
+/** Ordinary registry states an Unblind operation may reveal unless its approval names others. */
+export declare const DEFAULT_UNBLIND_STATES: readonly string[];
 /** Member signing proposals or elected delivery of full aggregates; all bytes are process-local. */
 export interface UnblindOutgoing {
     kin: "sign" | "query" | "reply";
@@ -30,28 +40,37 @@ export declare class Unblind implements AuxiliaryQueryProcessor {
     static readonly Route = "/ipex/unblind";
     readonly resource = "/ipex/unblind";
     readonly outgoing: Deck<UnblindOutgoing>;
-    private readonly pendingQueries;
-    private readonly now;
     private readonly operations;
+    /** Whether the persisted requests this identifier owes replies to were taken up by this owner. */
+    private restored;
     readonly hab: Hab;
     readonly exc: Exchanger;
     readonly rvy: Revery;
     readonly registry: RegistryObserver;
-    readonly states: readonly string[];
     readonly group: boolean;
-    /** Bind the exact Grant verifier's store and an explicit ordinary-state vocabulary. */
-    constructor({ hab, exc, registry, states, rvy, now }: {
+    private readonly kram;
+    /** Bind the exact Grant verifier's store; the state vocabulary is chosen per approved operation. */
+    constructor({ hab, exc, registry, rvy, kram }: {
         hab: Hab;
         exc: Exchanger;
         registry: RegistryObserver;
-        states: readonly string[];
         rvy?: Revery;
-        now?: () => number;
+        /** False when the runtime has KRAM off: its `tmsc`/`msgc` rows never exist, so `approve` refuses. */
+        kram?: boolean;
     });
-    /** Freeze one authenticated live Grant's exact bodies, parties and authorized registry scope. */
-    approve(grant: string): string;
+    /**
+     * Freeze one authenticated live Grant's exact bodies, parties, authorized registry scope and
+     * ordinary-state vocabulary. `states` defaults to the registry-root triple and applies to this
+     * operation only; approving the same Grant again with different explicit states is refused,
+     * while omitting `states` on a repeat approval keeps the frozen vocabulary.
+     */
+    approve(grant: string, options?: {
+        states?: readonly string[];
+    }): string;
     /** Freeze a signed disclosee query over the missing accepted public suffix. */
-    start(grant: string): Uint8Array;
+    start(grant: string, options?: {
+        states?: readonly string[];
+    }): Uint8Array;
     /**
      * Re-sign this disclosee's started individual query for delivery now.
      *
@@ -73,6 +92,12 @@ export declare class Unblind implements AuxiliaryQueryProcessor {
     processQuery(envelope: KeriDispatchEnvelope): {
         kind: "accept";
     } | MessageDropDecision;
+    /**
+     * Take up the requests this identifier owes a reply to after its owner was lost: each persisted request is
+     * processed again as when first accepted, and one that no longer holds (the Grant ended, its evidence changed)
+     * is dropped. Done once per owner, before the first look at what is owed.
+     */
+    private restoreHeld;
     /** Schedule responder work only after the selected live operation authenticates its peer query. */
     hasPeerQuery(xid: string): boolean;
     /** Retry a previously authenticated request locally when held proofs become available. */
@@ -106,18 +131,32 @@ export declare class Unblind implements AuxiliaryQueryProcessor {
     finish(xid: string): Operation<ExchangeDecision>;
     /** Discard approved work and unsent replies; delivered bytes remain caller-owned. */
     abandon(xid: string): void;
+    /** Drop an operation's process-local approval, messages and openings; a persisted request stays. */
+    private forget;
     /** Select the exact missing public suffix without signing or changing registry state. */
     private request;
+    /**
+     * Whether this local habitat is the party of Unblind transaction `xid` with `sender`.
+     *
+     * Messages carry no recipient, so a per-identifier registry selects the owner by transaction:
+     * an approved operation here, a stored Grant from this habitat addressed to `sender`, or, for a
+     * group, its own members' contributions, which KRAM must pool before this owner consents.
+     */
+    inTransaction(sender: string, xid: string): boolean;
+    /** Recipients of the Grants `pre` sent in transaction `xid`, from KRAM-accepted store rows. */
+    static recipients(db: Baser, pre: string, xid: string): string[];
     /** Release all process-local approvals, opening references and retry bytes without changing stores. */
     close(): void;
-    /** Hold one authenticated public suffix for explicit release consent; never import events here. */
-    private retainQuery;
-    /** Expired evidence cannot survive another owner interaction. */
-    private pruneQueries;
-    /** Consume the first authenticated request only after explicit approval; never renew either clock. */
-    private replayQuery;
-    /** Bound process-local public evidence by the original query and accepted Grant lifetimes. */
-    private retainUntil;
+    /** The one live Grant this identifier sent to `recipient` in exchange `xid`, from KRAM-accepted store rows. */
+    private sentGrant;
+    /**
+     * Individual discloser operations whose authenticated peer query is waiting for a delivered reply.
+     * Hosts adopt these to deliver the reply; a group discloser's replies need member contributions instead.
+     */
+    awaitingReply(): {
+        xid: string;
+        grant: string;
+    }[];
     private operation;
     private live;
     private current;

package/types/acdc/unblinding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unblinding.d.ts","sourceRoot":"","sources":["../../src/acdc/unblinding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGL,KAAK,KAAK,EAGV,KAAK,EAQL,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAqB,MAAM,gCAAgC,CAAC;AACrG,OAAO,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AAGjD,OAAO,EACL,KAAK,uBAAuB,EAG5B,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,KAAK,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAMlF,OAAO,EAAmB,KAAK,oBAAoB,EAAE,KAAK,MAAM,EAA2B,MAAM,oBAAoB,CAAC;AAGtH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,KAAK,kBAAkB,EAMxB,MAAM,kBAAkB,CAAC;AAwB1B,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;CACjB;AAwBD;;;;;;GAMG;AACH,qBAAa,OAAQ,YAAW,uBAAuB;IACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,mBAAmB;IACxC,QAAQ,CAAC,QAAQ,mBAAiB;IAClC,QAAQ,CAAC,QAAQ,wBAA+B;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAG3B;IACJ,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAClE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAExB,uFAAuF;gBAC3E,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAa,EAAE,GAAc,EAAE,EAAE;QACzE,GAAG,EAAE,GAAG,CAAC;QACT,GAAG,EAAE,SAAS,CAAC;QACf,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;KACpB;IAoBD,iGAAiG;IACjG,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IA6C9B,+EAA+E;IAC/E,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU;IAuBhC;;;;;;;;;OASG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAoBhC;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU;IA+EzD,2FAA2F;IAC3F,YAAY,CAAC,QAAQ,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAAG,mBAAmB;IAsDtF,mGAAmG;IACnG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAQlC,0FAA0F;IAC1F,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAyBhC,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAW,EAAE,IAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC1B,WAAW,CAAC,EAAE,oBAAoB,CAAC;KACpC,GAAG,oBAAoB;IAyDxB,yFAAyF;IACzF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAO9B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAYtD,sFAAsF;IACrF,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAmEjD,qFAAqF;IACrF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAkB1B,yFAAyF;IACzF,OAAO,CAAC,OAAO;IAmCf,uGAAuG;IACvG,KAAK,IAAI,IAAI;IAOb,mGAAmG;IACnG,OAAO,CAAC,WAAW;IA4BnB,iEAAiE;IACjE,OAAO,CAAC,YAAY;IAMpB,sGAAsG;IACtG,OAAO,CAAC,WAAW;IASnB,8FAA8F;IAC9F,OAAO,CAAC,WAAW;IAmBnB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,OAAO;IAQf,iFAAiF;IACjF,OAAO,CAAC,UAAU;IAWlB,mGAAmG;IACnG,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,SAAS;IAUjB,iGAAiG;IACjG,OAAO,CAAC,MAAM;IAcd,kGAAkG;IAClG,OAAO,CAAC,YAAY;IAapB,kGAAkG;IAClG,OAAO,CAAC,aAAa;IAWrB,gGAAgG;IAChG,OAAO,CAAC,YAAY;IA4BpB,iFAAiF;IACjF,OAAO,CAAC,WAAW;IA0CnB,OAAO,CAAC,MAAM;IAYd,4FAA4F;IAC5F,OAAO,CAAC,cAAc;IAoDtB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,IAAI;IA4BZ,OAAO,CAAC,OAAO;IA8Bf,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,aAAa;CA4BtB"}
+{"version":3,"file":"unblinding.d.ts","sourceRoot":"","sources":["../../src/acdc/unblinding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAGL,KAAK,KAAK,EAGV,KAAK,EAQL,KAAK,UAAU,EAGhB,MAAM,SAAS,CAAC;AACjB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAqB,MAAM,gCAAgC,CAAC;AACrG,OAAO,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AAGjD,OAAO,EACL,KAAK,uBAAuB,EAG5B,KAAK,mBAAmB,EAEzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,KAAK,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAMlF,OAAO,EAAmB,KAAK,oBAAoB,EAAE,KAAK,MAAM,EAA2B,MAAM,oBAAoB,CAAC;AACtH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,KAAK,kBAAkB,EAMxB,MAAM,kBAAkB,CAAC;AA0B1B,iGAAiG;AACjG,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAA6C,CAAC;AAElG,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,UAAU,CAAC;CACjB;AAwBD;;;;;;GAMG;AACH,qBAAa,OAAQ,YAAW,uBAAuB;IACrD,MAAM,CAAC,QAAQ,CAAC,KAAK,mBAAmB;IACxC,QAAQ,CAAC,QAAQ,mBAAiB;IAClC,QAAQ,CAAC,QAAQ,wBAA+B;IAChD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAuC;IAClE,kGAAkG;IAClG,OAAO,CAAC,QAAQ,CAAS;IACzB,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAClB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAU;IAE/B,oGAAoG;gBACxF,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAa,EAAE,IAAW,EAAE,EAAE;QAC9D,GAAG,EAAE,GAAG,CAAC;QACT,GAAG,EAAE,SAAS,CAAC;QACf,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,qGAAqG;QACrG,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB;IAgBD;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAO,GAAG,MAAM;IAuD5E,+EAA+E;IAC/E,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAO,GAAG,UAAU;IAuB9E;;;;;;;;;OASG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAoBhC;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU;IA+EzD,2FAA2F;IAC3F,YAAY,CAAC,QAAQ,EAAE,oBAAoB,GAAG;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAAG,mBAAmB;IAyDtF;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAenB,mGAAmG;IACnG,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAQlC,0FAA0F;IAC1F,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAyBhC,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAW,EAAE,IAAS,EAAE,WAAW,EAAE,EAAE;QAC1E,MAAM,EAAE,UAAU,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAC1B,WAAW,CAAC,EAAE,oBAAoB,CAAC;KACpC,GAAG,oBAAoB;IAyDxB,yFAAyF;IACzF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAO9B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAYtD,sFAAsF;IACrF,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC,gBAAgB,CAAC;IAmEjD,qFAAqF;IACrF,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAK1B,oGAAoG;IACpG,OAAO,CAAC,MAAM;IAgBd,yFAAyF;IACzF,OAAO,CAAC,OAAO;IAmCf;;;;;;OAMG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAKnD,+FAA+F;IAC/F,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE;IAShE,uGAAuG;IACvG,KAAK,IAAI,IAAI;IAMb,+GAA+G;IAC/G,OAAO,CAAC,SAAS;IAWjB;;;OAGG;IACH,aAAa,IAAI;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE;IAQjD,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,OAAO;IAQf,iFAAiF;IACjF,OAAO,CAAC,UAAU;IAWlB,mGAAmG;IACnG,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,SAAS;IAUjB,iGAAiG;IACjG,OAAO,CAAC,MAAM;IAcd,kGAAkG;IAClG,OAAO,CAAC,YAAY;IAapB,kGAAkG;IAClG,OAAO,CAAC,aAAa;IAWrB,gGAAgG;IAChG,OAAO,CAAC,YAAY;IA4BpB,iFAAiF;IACjF,OAAO,CAAC,WAAW;IA0CnB,OAAO,CAAC,MAAM;IAYd,4FAA4F;IAC5F,OAAO,CAAC,cAAc;IAoDtB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,IAAI;IA4BZ,OAAO,CAAC,OAAO;IA8Bf,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,aAAa;CA4BtB"}

package/types/app/bootstrap/authenticating.d.ts

@@ -1,6 +1,8 @@
 import { type Operation } from "effection";
 import type { Baser } from "../../db/basing.js";
 import type { Habery } from "../identity/habbing.js";
+import { type DoerPacing } from "../runtime/doing.js";
+import { type RuntimeClock } from "../runtime/runtime-clock.js";
 import type { HttpClient } from "../transport/http-client.js";
 /**
  * Return true when a well-known URL has been authorized into `wkas.`.
@@ -38,7 +40,7 @@ export declare class Authenticator {
     /** Process one bounded auth step if queued well-known work exists. */
     processOnce(): Operation<void>;
     /** Continuous auth doer for long-lived runtime hosts. */
-    authDo(): Operation<never>;
+    authDo(clock?: RuntimeClock, pacing?: Readonly<DoerPacing>): Operation<never>;
     /** Promote one eligible `woobi.` record into the fetchable `mfa.` queue. */
     private promoteQueuedWellKnown;
     /** Return the next pending `mfa.` auth record, if any. */

package/types/app/bootstrap/authenticating.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authenticating.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/authenticating.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,SAAS,EAAU,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAGrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,OAAO,CAMT;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;;;;OAKG;gBACS,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;IAKzC,sEAAsE;IACrE,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAe/B,yDAAyD;IACxD,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC;IAO3B,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB;IAsC9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAYvB;;;;;OAKG;IACH,OAAO,CAAE,kBAAkB;CAgC5B"}
+{"version":3,"file":"authenticating.d.ts","sourceRoot":"","sources":["../../../src/app/bootstrap/authenticating.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,SAAS,EAAU,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAErD,OAAO,EAAE,KAAK,UAAU,EAA4B,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,KAAK,YAAY,EAAe,MAAM,6BAA6B,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,KAAK,EACT,GAAG,EAAE,MAAM,GACV,OAAO,CAMT;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,aAAa;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B;;;;;OAKG;gBACS,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;IAKzC,sEAAsE;IACrE,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC;IAe/B,yDAAyD;IACxD,MAAM,CAAC,KAAK,GAAE,YAA0B,EAAE,MAAM,GAAE,QAAQ,CAAC,UAAU,CAAmB,GAAG,SAAS,CAAC,KAAK,CAAC;IAI5G,4EAA4E;IAC5E,OAAO,CAAC,sBAAsB;IAsC9B,0DAA0D;IAC1D,OAAO,CAAC,eAAe;IAYvB;;;;;OAKG;IACH,OAAO,CAAE,kBAAkB;CAgC5B"}